Re: HAproxy transparent proxy and IPv6

[Philipp Kolmann]

Hi,

I did some more testing and found the reason why it didn't work:

I have added the required ip cmds:

        post-up ip rule add fwmark 1 lookup 100
        post-up ip route add local 0.0.0.0/0 dev lo table 100

        post-up ip route add local ::/0 dev lo table 100

ip rule add fwmark 1 lookup 100 only adds the fwmark for IPv4 rule table...

ip -6 rule add fwmark 1 lookup 100 did the trick.

Maybe that helps somebody else in the future.

The whole ip-up/down looks like this now:

        post-up ip rule add fwmark 1 lookup 100
        post-up ip -6 rule add fwmark 1 lookup 100
        post-up ip route add local 0.0.0.0/0 dev lo table 100
        post-up ip -6 route add local ::/0 dev lo table 100
        pre-down ip -6 route del local ::/0 dev lo table 100
        pre-down ip route del local 0.0.0.0/0 dev lo table 100
        pre-down ip -6 route del from all fwmark 1 lookup 100
        pre-down ip route del from all fwmark 1 lookup 100


Thanks
Philipp

smime.p7s
Description: S/MIME Cryptographic Signature